CVE-2009-1186: canonical ubuntu_linux Classic Buffer Overflow

EPSS trend

Probability

0.54%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.54% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

25 links

www.securityfocus.com/archive/1/502752/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
wiki.rpath.com/wiki/Advisories:rPSA-2009-0063X Refsource MISCBroken Link
secunia.com/advisories/34801Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securitytracker.com/id?1022068VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=495052X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.debian.org/security/2009/dsa-1772Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200904-18.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory

Show all 25 references

launchpad.net/bugs/cve/2009-1186X Refsource MISCThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:103Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/34776Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34731Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34753Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34785Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34787Third Party AdvisoryX Refsource SECUNIANot Applicable
www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.securityfocus.com/bid/34539VDB EntryX Refsource BIDThird Party Advisory
www.vupen.com/english/advisories/2009/1053VDB EntryX Refsource VUPENPermissions Required
www.ubuntu.com/usn/usn-758-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/34771Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34750Third Party AdvisoryX Refsource SECUNIANot Applicable
wiki.rpath.com/Advisories:rPSA-2009-0063X Refsource CONFIRMBroken Link
git.kernel.org?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314X Refsource CONFIRM

Related vulnerabilities

CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-7262fedoraprojectfedora+282.87%8y ago19-03-2018 21:00In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2018-10196canonicalubuntu_linux+241.66%8y ago30-05-2018 21:00NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

All vulnerabilities inubuntu_linux debian_linux fedora opensuse linux_enterprise_debuginfo

CVE-2009-1186: canonical ubuntu_linux Classic Buffer Overflow

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References